scenario: log in with valid credentials